Check an IP Address, Domain Name, Subnet, or ASN

197.44.196.226 was found in our database!

$ whois 197.44.196.226

country·🇪🇬 Egypt

city·Cairo

isp·TE Data

asn·AS8452

network·Standard

$ sikker risk 197.44.196.226scoring →

confidence

72%High

first_seen·Feb 15, 2026

last_seen·33m ago

sessions·16

events·16

$ sikker protocols 197.44.196.226

SMB

16 / 16

$ sikker summary 197.44.196.226

197.44.196.226 has a threat confidence score of 72%. This IP address from Egypt (AS8452, TE Data) has been observed in 16 honeypot sessions targeting SMB protocols. Detected attack patterns include remcom remote execution. First observed on February 15, 2026, most recently active March 24, 2026.

$ sikker behaviors 197.44.196.226catalog →

highRemcom Remote Execution4x

Sequential SMB session opening IPC$, accessing the svcctl pipe, issuing an RPC call, then opening the RemCom_communicaton pipe. Indicates remote service-based command execution.

$ sikker primitives 197.44.196.226

smb_empty_rpc_call4 smb_ipc_share_access4 smb_remcom_pipe_open4 smb_svcctl_pipe_open4

$ sikker related 197.44.196.226

🇪🇬·More threats fromEgypt→AS·More threats fromTE Data→SMB·More threats targetingSMB→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
196.202.71.84	16%	17
196.202.18.86	16%	18
81.10.55.215	72%	106
41.38.96.28	98%	264
197.54.224.179	94%	24

IP Address	Confidence	Events
196.202.71.84	16%	17
41.129.52.246	99%	157
196.202.18.86	16%	18
81.10.55.215	72%	106
41.38.96.28	98%	264